MAL-2025-30837 Malicious code in pulsar-mushroom-4e6b (npm)

The package pulsar-mushroom-4e6b was found to contain malicious code...

MAL-2025-30844 Malicious code in pulsar-wezen-nightwatch-jabbah (npm)

The package pulsar-wezen-nightwatch-jabbah was found to contain malicious code...

MAL-2025-34636 Malicious code in technosignature-pulsar-meissa-leda (npm)

The package technosignature-pulsar-meissa-leda was found to contain malicious code...

MAL-2025-30842 Malicious code in pulsar-superposition-fomalhaut-on (npm)

The package pulsar-superposition-fomalhaut-on was found to contain malicious code...

MAL-2025-34014 Malicious code in stratosphere-meteor-testcafe-pulsar (npm)

The package stratosphere-meteor-testcafe-pulsar was found to contain malicious code...

MAL-2025-34392 Malicious code in tailwindcss-pulsar-hyperion-standard (npm)

The package tailwindcss-pulsar-hyperion-standard was found to contain malicious code...

MAL-2025-27686 Malicious code in nodemon-extremophile-pulsar-polaris (npm)

The package nodemon-extremophile-pulsar-polaris was found to contain malicious code...

MAL-2025-30845 Malicious code in pulsar-zamia-0ql5 (npm)

The package pulsar-zamia-0ql5 was found to contain malicious code...

MAL-2025-30840 Malicious code in pulsar-solis-pino-pretty-dysonswarm (npm)

The package pulsar-solis-pino-pretty-dysonswarm was found to contain malicious code...

MAL-2025-38780 Malicious code in warp-metabolomics-carpo-pulsar (npm)

The package warp-metabolomics-carpo-pulsar was found to contain malicious code...

MAL-2025-28230 Malicious code in on-middleware-pulsar-jabbah (npm)

The package on-middleware-pulsar-jabbah was found to contain malicious code...

MAL-2025-30839 Malicious code in pulsar-oscar-uv8l (npm)

The package pulsar-oscar-uv8l was found to contain malicious code...

MAL-2025-32139 Malicious code in resonance-socketio-pulsar-meteor (npm)

The package resonance-socketio-pulsar-meteor was found to contain malicious code...

MAL-2025-38219 Malicious code in venus-pulsar-paleoclimatology-resonance (npm)

The package venus-pulsar-paleoclimatology-resonance was found to contain malicious code...

com.ascentstream.pulsar:bcfips-include-test (>=3.0.7.0-SNAPSHOT-a030c50 <=3.0.8.0-SNAPSHOT-16a7bcc), com.ascentstream.pulsar:bouncy-castle-bcfips (>=3.0.7.0-SNAPSHOT-a030c50 <=4.0.11.0) +13 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcpkix-fips (>=1.0.5 <=2.0.11)

org.bouncycastle:bcpkix-fips MAVEN version =1.0.5, =3.0.7.0-SNAPSHOT-a030c50, =3.0.7.0-SNAPSHOT-a030c50, =2.1.2, =8.0.0, =1.2.0, =1.17.0, =1.17.0, =3.1.0, =3.0.0.1, =3.0.0.1, =3.13.14, =3.0.0, =1.0.4, =1.0.0, =19.0.0, =25.0.6 Source cves: CVE-2025-8916 Source advisory:...

app.cash.backfila:client-misk (>=0.1.0 <=2023.11.24.141218-0357917), app.cash.backfila:client-misk-dynamodb (>=0.1.3-20210127.1838-76ab4fc <=0.1.4-20210806.0204-5341f38) +1456 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcprov-ext-jdk15on (>=1.49 <=1.70)

org.bouncycastle:bcprov-ext-jdk15on MAVEN version =1.49, =0.1.0, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210805.0116-93702c4, =0.1.3-20210805.0116-93702c4, =0.1.0, =2023.06.07.114626-93b9d6f, =0.1.0, =0.1.4-20220614.0152-5ae0eef, =3.0.1, =2.10.0-11-1, =1.1.5, =1.0.2,...

cn.jarkata:jarkata-encrypt (=1.0.0), cn.ponfee:commons-core (>=1.1 <=1.4) +242 more potentially affected by CVE-2025-8885 via org.bouncycastle:bcprov-ext-jdk18on (>=1.71 <=1.77)

org.bouncycastle:bcprov-ext-jdk18on MAVEN version =1.71, =1.1, =2.4.1, =3.0.0 - com.clever-cloud.pulsar4s:pulsar4s-akka-streams2.12 =2.9.1 - com.clever-cloud.pulsar4s:pulsar4s-akka-streams2.13 =2.9.1 - com.clever-cloud.pulsar4s:pulsar4s-akka-streams3 =2.9.1 -...

cn.herodotus.engine:message-spring-boot-starter (>=2.7.3.4 <=3.0.0-M2), com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=4.0.0 <=4.1.1) +179 more potentially affected by CVE-2025-27819 via org.apache.kafka:kafka_2.13 (>=2.4.0 <=3.3.2)

org.apache.kafka:kafka2.13 MAVEN version =2.4.0, =2.7.3.4, =4.0.0, =4.0.0, =4.0.0, =4.0.1, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =1.0.0, =1.2.0 - com.cerner.c...

cn.herodotus.engine:message-spring-boot-starter (>=2.7.3.4 <=3.0.0-M2), com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=4.0.0 <=4.1.1) +232 more potentially affected by CVE-2025-27818 via org.apache.kafka:kafka_2.13 (>=2.4.0 <=3.9.0)

org.apache.kafka:kafka2.13 MAVEN version =2.4.0, =2.7.3.4, =4.0.0, =4.0.0, =4.0.0, =4.0.1, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.7.4-SNAPSHOT-35e64fa - com.bisnode.kafka.authorizat...

The vulnerability of the Apache Pulsar IO Kafka Connector and the software Apache Pulsar IO Kafka Connect Adaptor lies in the insufficient protection of registration data, allowing attackers to disclose sensitive information.

The vulnerability of the Apache Pulsar IO Kafka Connector and the Apache Pulsar IO Kafka Connect Adapter software is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...